● CVE — Medium
CVE-2021-45105
Vendordebian, oracle, netapp, sonicwall, apacheProductdebian linux, business intelligence, agile product lifecycle management, banking payments, banking platform, agile plm, agile engineering data management, autovue for agile product lifecycle management, banking enterprise default management, communications asap, banking treasury management, banking party management, agile plm mcad connector, banking deposits and lines of credit servicing, banking loans servicing, cloud manager, network security manager, banking trade finance, log4j, email security, 6bk1602-0aa12-0tp0 firmware, 6bk1602-0aa22-0tp0 firmware, 6bk1602-0aa32-0tp0 firmware, 6bk1602-0aa42-0tp0 firmware, 6bk1602-0aa52-0tp0 firmware, web application firewallDiscoveredDec 18, 2021UpdatedAug 25, 2026
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.